CVE-2022-3281

highpriority · track · 0EPSS 0.008 · 56 %ileDEEURUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.79% (56th) EPSS
CVSS 7.5 · high
Is it mine?
97 products
Check your exposure
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · scored 2026-10-27

WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote attacker to circumvent the reach the network that should be protected by the MAC address filter.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • Fixedwago_psirt

    We recommend all effected users to update to the firmware version listed below: ### **Serie WAGO PFC100/PFC200 and WAGO Compact Controller CC100** | Article Number | Fixed Firmware | |-----------------------|--------------------| | 750-81xx/xxx-xxx | 03.10.10(22) | | 750-8217/xxx-xxx | 03.10.10(22) | | 750-82xx/xxx-xxx | 03.10.10(22) | | 751-9301 | 04.01.10(23) | ### **Serie WAGO Touch Panel 600 and WAGO Edge Controller** | Article Number | Fixed Firmware | |-----------------------|--------------------| | 762-4xxx | 03.10.10(22) | | 762-5xxx | 03.10.10(22) | | 762-6xxx | 03.10.10(22) | | 752-8303/8000-002 | 03.10.10(22) |

  • Mitigationwago_psirt

    Reactivate MAC Address Filter after restart to make sure MAC Address Filter is working. To test if the MAC Address Filter is working just add a test-client to the MAC Address Filter list, enable it and check if you can access the web-based-management via the test-client.

02

cvss

Technical severity, 0–10. One row per scoring source.

7.5
010

base score 0–10 · higher = more severe · hover a vector to decode

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · NVD / NIST USexploitability 3.9 · impact 3.6
v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · FSTEC (BDU) RU
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · ENISA EU
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · info@cert.vde.comexploitability 3.9 · impact 3.6
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · WAGO PSIRT DE
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-440USCWE-440USCWE-440US
05

affected products (97)

Products and version ranges known to be affected.

showing 20 of 97
06

advisories (1)

Vendor and ecosystem advisories describing this.

  • VDE-2022-042WAGO: Multiple products - Loss of MAC-Address-Filtering after reboot2022-10-17csaf · wago_psirtDE

    The MAC address filter as part of the firewall has a flaw, which prevents the MAC address filter to be active after restart. In this way a remote attacker is able to circumvent the MAC address filtering after a reboot of a device.

07

also known as (5)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bdunvdwago_psirtNVDCVE.orgMITRE
published 2022-10-17modified 2026-06-17
09

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan